Vulnerabilities in Unified Automation
8 resultsVexday analysis
Unified Automation possui 8 vulnerabilidades catalogadas, com apenas 1 crítica (CVSS), mas nenhuma sob exploração ativa conhecida. A fraqueza predominante (CWE-416 - use-after-free) indica problemas de gerenciamento de memória em seus produtos, um padrão típico de segurança de baixo nível que exige atenção em processos de desenvolvimento. O portfólio apresenta risco moderado e estável, sem novidades nos últimos 90 dias.
CVE-2023-32174CRITICALUnified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution VulnerabilityEPSS 1.9%CVE-2022-37012HIGHThis vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C+EPSS 1.8%CVE-2023-32172MEDIUMUnified Automation UaGateway OPC UA Server Use-After-Free Denial-of-Service VulnerabilityEPSS 1.4%CVE-2023-32171MEDIUMUnified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service VulnerabilityEPSS 1.4%CVE-2023-32173MEDIUMUnified Automation UaGateway AddServer XML Injection Denial-of-Service VulnerabilityEPSS 1.2%CVE-2022-37013HIGHThis vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C+EPSS 1.1%CVE-2023-41185HIGHUnified Automation UaGateway Certificate Parsing Integer Overflow Denial-of-Service VulnerabilityEPSS 0.8%CVE-2023-32170MEDIUMUnified Automation UaGateway OPC UA Server Improper Input Validation Denial-of-Service VulnerabilityEPSS 0.6%